CWE-522
Overview
- CWE ID
- 522
- CWE Name
- Insufficiently Protected Credentials
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.